This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier: BMLn7hXuL0o6C/ez9TAbMIlSIORlZ5ekkIawCanSmX8=
Subject key identifier: 1A:D4:2F:CF:93:13:29:18:2E:D1:52:2C:D6:D8:23:D8:81:26:E4:F0
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number: E6
Signing time: Fri 19 Dec 2025 04:33:53 +0000
Manifest this update: Fri 19 Dec 2025 04:33:53 +0000
Manifest next update: Fri 26 Dec 2025 04:33:53 +0000
Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: qILd3OM17Sr5xzNfUjQFmlYSWDZMzLrbY4ItJtSgbVc=)
2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: ItObitSQLkGH+talVc8PNR7Z2o8Aby5tjfREkgGvzVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Validity
Not Before: Dec 19 04:33:53 2025 GMT
Not After : Dec 26 04:33:53 2025 GMT
Subject: CN=6944d5b1-8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:84:3c:66:9d:06:d1:5a:dc:30:0e:a1:ad:
60:2a:24:1e:6e:ee:aa:37:13:b4:7b:9e:93:f3:3b:
7d:3f:b2:9c:31:1e:3c:68:a4:6b:9c:73:47:93:a6:
4a:65:c5:38:fc:c4:a5:ab:da:2b:2e:c0:13:77:e0:
17:f3:e6:cd:4d:de:7b:f2:68:0f:bc:af:43:6a:2f:
c7:a8:b4:ec:44:fe:0e:b6:d2:06:62:8f:c4:7c:dc:
72:75:ca:b7:71:46:92:8b:81:69:6f:43:ef:d2:9b:
1e:e2:b5:b2:3e:32:da:77:6d:78:a6:f9:70:a2:fb:
4b:0e:48:bf:cd:c4:82:05:2c:6e:43:f0:15:84:eb:
98:f3:d0:a1:dc:9b:65:9e:9e:0f:10:a5:f0:c9:bd:
87:88:96:20:a9:aa:d8:b1:c4:58:9a:50:40:04:5e:
48:50:ee:80:00:ea:0c:cf:96:3b:f3:f8:6d:66:3b:
c3:e9:94:b1:11:e2:db:fb:d2:86:c4:a2:b2:18:02:
cc:2a:7b:bd:07:e3:3f:60:18:ba:aa:e9:d3:50:8c:
9c:23:d8:a1:b2:1f:b7:70:ad:9a:10:b0:0f:13:0c:
48:94:f6:08:5f:f5:8d:ba:20:c1:18:e9:e7:62:46:
43:00:f6:3b:3d:45:12:78:69:ad:51:ca:16:ba:a4:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:2F:CF:93:13:29:18:2E:D1:52:2C:D6:D8:23:D8:81:26:E4:F0
X509v3 Authority Key Identifier:
keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:c8:85:bf:e3:e6:33:a1:9f:b5:77:43:4d:10:a7:90:de:
51:2f:ab:6f:da:31:5c:f9:2f:4a:ca:6b:90:63:4d:25:1d:a7:
19:3c:f1:81:a8:a2:11:f7:a1:1c:f2:ac:27:df:b9:02:11:de:
78:fc:e8:c9:11:0a:f7:d9:12:aa:77:41:6f:39:b7:6f:a8:a0:
08:68:9b:8d:d7:e2:f6:3b:19:1f:e2:f8:ad:dd:fe:2b:ff:e2:
4e:ed:9f:29:8c:0d:f3:c2:7e:b8:26:cf:46:84:d3:df:c4:de:
78:08:00:38:2e:d2:db:da:b7:de:a9:76:2f:82:67:0f:71:a0:
68:4a:04:d8:23:6b:a3:66:3b:09:6c:b8:4a:1b:f3:d3:2f:f2:
be:8d:e6:45:04:a8:9e:d9:85:52:0b:66:af:28:bd:23:09:2e:
7e:c6:6d:69:db:7d:0a:45:3d:a9:9e:dc:ad:90:02:31:19:5d:
db:07:92:86:ff:e9:ad:ab:5e:1a:e0:69:38:6c:d8:e7:eb:ee:
5b:07:a3:a2:c9:fb:fa:56:29:f8:dd:7f:d3:bc:7a:7a:56:f5:
27:29:6d:8a:f0:70:fb:f4:26:ae:92:ef:43:44:2b:13:29:69:
5a:3a:4a:ed:a8:c0:28:c7:98:13:c2:e6:12:18:ba:5c:44:2d:
eb:ea:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:48:03 2025 by rpki-client